Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-16...er.exe

windows7-x64

9

2024-03-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-16_e5b15db2a9f9464eab6e77bad0bf7c32_cryptolocker

  • Size

    63KB

  • Sample

    240316-fn3fwace81

  • MD5

    e5b15db2a9f9464eab6e77bad0bf7c32

  • SHA1

    95df230b45d70e61b448e52123a1a046c09fa11e

  • SHA256

    91b585725b89a3d9951ec47dcd6588f602889d8bd656ffc9598a407a222a55d5

  • SHA512

    a048b890a9c394ab0efd7236c0a6bd39eb4739dde818de1bc61df8a5276fb3b060d454da42186e58452d0f3ea3bdf79ef6bc351029bdccda2831e0857e328f60

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGW:aq7tdgI2MyzNORQtOflIwoHNV2XBFV73

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_e5b15db2a9f9464eab6e77bad0bf7c32_cryptolocker

    • Size

      63KB

    • MD5

      e5b15db2a9f9464eab6e77bad0bf7c32

    • SHA1

      95df230b45d70e61b448e52123a1a046c09fa11e

    • SHA256

      91b585725b89a3d9951ec47dcd6588f602889d8bd656ffc9598a407a222a55d5

    • SHA512

      a048b890a9c394ab0efd7236c0a6bd39eb4739dde818de1bc61df8a5276fb3b060d454da42186e58452d0f3ea3bdf79ef6bc351029bdccda2831e0857e328f60

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGW:aq7tdgI2MyzNORQtOflIwoHNV2XBFV73

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks